e59fc7fd18e97a553f5e3d6526887ee23749fcaa2eb76b83abeb225a3a99bd64

General

Target
e59fc7fd18e97a553f5e3d6526887ee23749fcaa2eb76b83abeb225a3a99bd64
Size 765KB
Sample230327-ygzerafa34
SHA256 e59fc7fd18e97a553f5e3d6526887ee23749fcaa2eb76b83abeb225a3a99bd64
MD5 e30277001fcaef15871b544e2e4d52ae
SHA1 7108bb42613740d9d6d7d1822f9bece45e55b62d
SHA512 a4c0371f86ab56e82e8f8f70dd0820c1f886f93a0b10cc8a1f9c90fd04d18bfd6acd6c42b2f4ae2d7275793e9f4c13c2955b80c0737262d348daa2fb34bad647
SSDEEP 12288:KHKgutqJNTXP6CvIB4dAZqWf+7M9FmQG9RaRs4YqMuiAQR:KHktsNTXTvnAZqWfkcyvWXY0iAC
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

e59fc7fd18e97a553f5e3d6526887ee23749fcaa2eb76b83abeb225a3a99bd64

.exe 765KB

e59fc7fd18e97a553f5e3d6526887ee23749fcaa2eb76b83abeb225a3a99bd64

IMPHASH 22a1312b6eef4a70b0967af8974379c4
SHA256 e59fc7fd18e97a553f5e3d6526887ee23749fcaa2eb76b83abeb225a3a99bd64
MD5 e30277001fcaef15871b544e2e4d52ae
SHA1 7108bb42613740d9d6d7d1822f9bece45e55b62d
SHA512 a4c0371f86ab56e82e8f8f70dd0820c1f886f93a0b10cc8a1f9c90fd04d18bfd6acd6c42b2f4ae2d7275793e9f4c13c2955b80c0737262d348daa2fb34bad647
SSDEEP 12288:KHKgutqJNTXP6CvIB4dAZqWf+7M9FmQG9RaRs4YqMuiAQR:KHktsNTXTvnAZqWfkcyvWXY0iAC
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

33860

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindResourceExW DeleteVolumeMountPointA MoveFileExW GetCommState WaitNamedPipeA GlobalSize SetDefaultCommConfigW GetProfileStringW SetComputerNameW WaitForSingleObjectEx FreeEnvironmentStringsA EnumCalendarInfoExW GetConsoleTitleA GetCompressedFileSizeW CreateActCtxW EnumResourceTypesA SetHandleCount TlsSetValue VirtualFreeEx LoadLibraryW InterlockedPopEntrySList SetConsoleMode GetConsoleAliasW GetFileAttributesW IsBadStringPtrA WritePrivateProfileStringW GetStringTypeExA VirtualQuery GetStdHandle SetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW SearchPathA SetThreadPriorityBoost LoadLibraryA LocalAlloc CreateHardLinkW AddAtomW OpenEventA BeginUpdateResourceA WriteProfileSectionW FoldStringW GetModuleFileNameA GetModuleHandleA WaitForDebugEvent QueryPerformanceFrequency SetCalendarInfoA DeleteFileW ReadConsoleOutputCharacterW FindNextVolumeA GetConsoleAliasesW InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree MultiByteToWideChar TerminateProcess GetCurrentProcess IsDebuggerPresent GetStartupInfoW RtlUnwind RaiseException LCMapStringA WideCharToMultiByte LCMapStringW GetCPInfo GetModuleHandleW ExitProcess WriteFile HeapAlloc HeapCreate VirtualFree HeapReAlloc GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers CreateFileA CloseHandle

user32

GetCaretBlinkTime

gdi32

CreateDiscardableBitmap GetCharABCWidthsW

Sharing

General

Malware Config

Signatures

File Explorer

e59fc7fd18e97a553f5e3d6526887ee23749fcaa2eb76b83abeb225a3a99bd64

kernel32

user32

gdi32